$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1a172301-aedb-391c-9c90-f7e0ab5c99c2.roa File: 1a172301-aedb-391c-9c90-f7e0ab5c99c2.roa (raw, json) Hash identifier: s5OeAcdqq1onKEfsu9HcKMBeH89nzSHhG0EIuMFdX5I= Subject key identifier: 2D:C9:9B:E3:AF:50:3F:A2:18:E2:A0:4B:B4:C5:B5:9B:A9:73:3D:4F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F9C44899C7729B0461BB5FF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1a172301-aedb-391c-9c90-f7e0ab5c99c2.roa Signing time: Sat 24 Oct 2026 16:59:39 +0000 ROA not before: Sat 24 Oct 2026 16:59:39 +0000 ROA not after: Fri 22 Jan 2027 17:59:39 +0000 asID: 218911 IP address blocks: 65.86.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9c:44:89:9c:77:29:b0:46:1b:b5:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 16:59:39 2026 GMT Not After : Jan 22 17:59:39 2027 GMT Subject: CN=3cc68bff-bdc5-482c-9005-61ae598a4c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:72:b6:a9:aa:49:55:e6:95:ab:20:b3:37: 7d:81:61:7c:04:d9:41:8e:29:1a:5e:02:32:24:b7: 85:00:c7:2d:1f:ea:cf:bb:1d:10:9e:8b:12:0d:cd: 2a:bd:e5:ce:d8:17:2e:de:bd:14:fc:67:54:b9:ff: e7:3e:04:18:46:77:91:69:2a:fb:4e:39:e2:ce:56: 85:50:75:07:76:0e:73:18:55:ea:29:7e:53:01:c8: 85:e1:3f:b6:50:fb:4d:c7:64:fe:4d:09:7e:4d:a6: 9b:e9:c0:11:10:41:83:8f:f1:1f:e7:62:c1:35:b3: b6:ce:2e:a3:dc:86:36:73:7d:0a:41:8f:36:b6:4c: cc:46:be:0b:97:31:0d:d4:0b:54:c8:fa:07:df:5c: a4:46:a1:76:6c:6d:45:fd:f2:0a:ed:b5:ba:88:35: ba:92:fb:4b:0a:3e:c6:4f:cb:f5:6e:f7:69:df:91: b9:d1:4d:9d:7a:e7:3b:2d:1d:b1:a1:ad:ea:1a:ef: db:1b:a6:fb:8d:78:4e:e3:a1:cc:a4:ef:ec:d2:9c: 15:73:74:20:fa:ce:e0:25:6a:20:99:ef:74:ab:fc: 0a:81:9d:4f:9a:b0:00:18:4d:52:20:a0:de:c9:f5: 95:86:e0:69:f4:ba:71:98:a6:47:24:6f:47:78:ab: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C9:9B:E3:AF:50:3F:A2:18:E2:A0:4B:B4:C5:B5:9B:A9:73:3D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1a172301-aedb-391c-9c90-f7e0ab5c99c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:be:61:a4:48:bc:89:81:19:64:2d:9b:de:b3:f2:07:dc:56: 36:59:40:23:a3:30:23:f2:93:ef:1e:85:39:82:c0:fa:75:13: a1:1b:3c:ea:29:d5:1f:37:ca:b2:c2:2c:33:bb:ca:02:f1:ac: 23:b2:30:d1:74:aa:4a:a1:8f:bc:66:e5:ed:30:9c:f9:c9:3d: 03:54:24:b6:cd:2c:22:7d:bc:ef:42:c7:99:df:85:c2:a8:45: 73:68:d4:69:48:23:56:9a:1a:25:19:23:4a:29:75:a4:1e:83: 58:21:aa:54:73:56:6f:3f:b1:5f:69:a1:d3:60:6e:b8:5e:37: 01:ac:07:cf:bf:84:48:15:df:6b:ed:67:35:d1:31:f7:cb:f5: aa:27:25:ba:79:6a:1d:91:e7:54:ca:63:59:cb:fd:80:8c:0e: 4d:5f:5b:52:db:12:3d:18:bd:5e:f1:48:5f:93:60:02:14:86: bf:4a:ec:12:93:6d:5a:91:21:31:43:ee:1a:d8:25:6d:b6:f2: 38:8e:0d:9d:ff:a8:d3:5f:28:35:2a:dd:6f:5b:8e:2d:16:f3: 79:48:c9:e1:a3:81:1f:da:29:1a:c3:64:26:cb:8e:1b:16:8c: 94:82:ba:0e:18:df:c2:ee:b8:a2:6d:bf:62:76:c3:52:1e:b7: 75:9f:19:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+cRImcdymwRhu1/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyNDE2NTkzOVoXDTI3MDEyMjE3NTkzOVowLzEtMCsGA1UEAxMk M2NjNjhiZmYtYmRjNS00ODJjLTkwMDUtNjFhZTU5OGE0YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZytqmqSVXmlasgszd9gWF8BNlBjikaXgIy JLeFAMctH+rPux0QnosSDc0qveXO2Bcu3r0U/GdUuf/nPgQYRneRaSr7TjnizlaF UHUHdg5zGFXqKX5TAciF4T+2UPtNx2T+TQl+Taab6cAREEGDj/Ef52LBNbO2zi6j 3IY2c30KQY82tkzMRr4LlzEN1AtUyPoH31ykRqF2bG1F/fIK7bW6iDW6kvtLCj7G T8v1bvdp35G50U2deuc7LR2xoa3qGu/bG6b7jXhO46HMpO/s0pwVc3Qg+s7gJWog me90q/wKgZ1PmrAAGE1SIKDeyfWVhuBp9LpxmKZHJG9HeKt9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Jm+OvUD+iGOKgS7TFtZupcz1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWExNzIzMDEtYWVkYi0z OTFjLTljOTAtZjdlMGFiNWM5OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI++YaRIvImBGWQtm96z8gfcVjZZQCOjMCPyk+8ehTmCwPp1E6EbPOop 1R83yrLCLDO7ygLxrCOyMNF0qkqhj7xm5e0wnPnJPQNUJLbNLCJ9vO9Cx5nfhcKo RXNo1GlII1aaGiUZI0opdaQeg1ghqlRzVm8/sV9podNgbrheNwGsB8+/hEgV32vt ZzXRMffL9aonJbp5ah2R51TKY1nL/YCMDk1fW1LbEj0YvV7xSF+TYAIUhr9K7BKT bVqRITFD7hrYJW228jiODZ3/qNNfKDUq3W9bji0W83lIyeGjgR/aKRrDZCbLjhsW jJSCug4Y38LuuKJtv2J2w1Iet3WfGVA= -----END CERTIFICATE-----Generated at Tue Oct 27 00:15:25 2026 by rpki-client